Privacy Notice
Privacy Notice
Last updated: March 2026
Who We Are
This Privacy Notice explains how Ardeynor collects, uses, and shares your personal data when you visit or make a purchase from our store at https://ardeynor.myshopify.com.
The data controller responsible for your personal data is:
- Legal Name: Mr Ben Stephen Wiggett
- Trading Name: Ardeynor
- Address: 4 The Rowans, Humberston, DN36 4BN, United Kingdom
- Email: mrbenstephen882@outlook.com
We are the data controller responsible for your personal data.
What Data We Collect
- Identity Data: name, title
- Contact Data: email address, phone number, delivery address, billing address
- Transaction Data: order history, payment details (processed by third-party payment providers — we do not store card numbers)
- Technical Data: IP address, browser type and version, device type, operating system, time zone, Shopify session data
- Usage Data: pages visited, products viewed, time spent on pages, referral source
- Marketing Data: your preferences for receiving marketing communications and your communication preferences
How and Why We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and fulfilling your orders | Identity, Contact, Transaction | Performance of a contract |
| Managing payments | Transaction | Performance of a contract |
| Sending order confirmations and updates | Contact | Performance of a contract |
| Fraud prevention and security | Technical, Transaction | Legitimate interest |
| Improving our website and services | Technical, Usage | Legitimate interest |
| Sending marketing communications (only with consent) | Contact, Marketing | Consent |
| Complying with legal obligations (e.g., tax records) | Identity, Transaction | Legal obligation |
Who We Share Your Data With
- Shopify Inc. (our e-commerce platform provider — processes orders, hosts our store)
- Payment processors (e.g., Shopify Payments, PayPal — to process your payments)
- Delivery partners (e.g., Royal Mail, DHL — to deliver your orders)
- Analytics providers (e.g., Google Analytics — to understand website usage, anonymised where possible)
We require all third parties to respect the security of your data and to treat it in accordance with the law. We do not sell your personal data to any third party.
International Transfers
Some of our service providers (including Shopify) are based outside the UK. Where we transfer your data outside the UK, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreement (IDTA)
- Standard Contractual Clauses (as supplemented for UK transfers)
- Or transfers to countries with an adequacy decision
Data Retention
- Order data: retained for 6 years (HMRC tax obligations)
- Marketing data: until you withdraw consent
- Technical/analytics data: 26 months
- Account data: until you request deletion
We will securely delete or anonymise your data when it is no longer needed.
Your Rights
Under UK GDPR you have the right to:
- Access your personal data (Subject Access Request)
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent (where consent is our legal basis)
To exercise any of these rights, please contact us at mrbenstephen882@outlook.com. We will respond within one month.
Cookies
For details about the cookies and similar technologies we use, please see our Cookie Policy.
Complaints
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
We would appreciate the chance to address your concerns before you contact the ICO, so please contact us first.
Changes to This Notice
We may update this Privacy Notice from time to time. The date at the top of this page indicates when it was last updated.